Scanned skills

larksuite/cli lark-calendar

Checked the catalogued skill at lark-calendar.

SkillTrust corpus scan 6 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 6
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

6 findings
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
securityhigh SD-007
references/lark-calendar-meeting.md
5 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
SKILL.md

No path traversal evidence in the context; the line contains only empty content.

permission_hygienehigh SD-003 benign_example
SKILL.md

The file is documentation and contains no actual path traversal code.

permission_hygienecritical SD-006 benign_example
references/lark-calendar-join-event.md

The token appears only as an example value in documentation, not an actual hardcoded secret in code

permission_hygienehigh SD-003 benign_example
references/lark-calendar-meeting-relation.md

Reference to internal documentation using relative path; no execution or data exfiltration risk.

permission_hygienehigh SD-003 benign_example
references/lark-calendar-meeting-relation.md

Same as id 1, benign reference in documentation.